HETF by 1 DASH LLC

Privacy Policy

Effective 4 August 2026. Last updated 4 August 2026.

HETF is a work app for wildfire Heavy Equipment Task Force contractors. It replaces the paper a crew fills out at the end of a shift — the Daily Shift Invoice and the After Dispatch Roster — and produces the PDF that goes to a Forest Service Finance section so the contractor gets paid.

This policy explains exactly what the app stores, where it goes, and who can reach it. It is written against the actual database schema rather than a template, so it should be specific enough to be useful.

Who is responsible for your information

The app is operated by 1 DASH LLC ("we", "us"). Contact: kimoy@1dash.io.

There is an important distinction in how this app is used. A contractor company signs up and decides what goes into its forms — including the names of its crew and the signature of the government officer who approves a shift. The contractor company controls that information. We store and process it on that company's behalf, and we do not decide what is entered or use it for our own purposes.

If you are a crew member or a government officer whose name or signature appears in this app, the contractor company you worked with entered it. You can write to us at kimoy@1dash.io and we will help — but we will normally need to refer your request to that company, because the records are theirs.

What the app stores

Category What it contains
Account Your email address, your full name, and your password. The password is never stored as you typed it — it is hashed with scrypt and cannot be read back by anyone, including us.
Company profile Company name, address, phone number, email address and HETF agreement number. This exists so the forms auto-fill instead of being retyped every shift.
Crew The full name and role of each person the company adds — operators, mechanics, supervisors — so they can be placed on a roster.
Equipment and assignments Equipment records, task forces and incident names.
Forms Completed Daily Shift Invoices and After Dispatch Rosters, including hours, mileage and line items. A filed form also keeps a snapshot of the profile data it was built from, so paperwork already submitted to the government cannot be altered later by editing the company profile.
Signatures An image of each handwritten signature captured on the device, together with the printed name and the time it was signed. This includes the signature of the government officer who approves the shift, collected in person at the fire.
Receipts A photograph of the receipt plus vendor, amount, category, date and any note — for expenses the Forest Service reimburses.
Documents Files the company chooses to upload, such as a VIPR agreement, a certificate of insurance, MSHA cards or inspection reports, along with the original filename and size. The app does not inspect the contents of these files.
Sign-in tokens Tokens that keep you signed in, held in the device's secure storage. Refresh tokens expire after 90 days, password reset links after 30 minutes, and invitations after 7 days.

What the app does not collect

This list is deliberately specific, because most of it is unusual to be able to say:

Camera and photo access

The app asks for two device permissions, both only when you first use the feature that needs them, and both refusable:

The app only ever receives the individual photo you select. It cannot browse your library, and it does not upload anything else from your device.

How the information is used

We use what the app stores only to run the app itself:

We do not use this information to build a profile of you, to train machine learning models, or for any purpose unrelated to producing and delivering the forms.

The PDF is rendered on your device

Worth stating plainly, because it limits what our servers ever see of a signed document: the completed PDF is generated on the phone or tablet, and the exact bytes produced there are stored and emailed unchanged. Our server never re-renders a form, so what a Finance section opens is exactly what was signed in front of the officer.

Who else touches the data

Two service providers, both under contract and neither permitted to use the data for their own purposes:

Provider Role
Google Cloud Hosting, database and file storage, in the United States (Iowa, us-central1). Storage buckets are private, with public access prevention enforced.
Resend Delivers the email carrying a completed form to the address the crew enters.

Beyond those, we disclose information only when the law requires it, or when a company instructs us to. Note that a completed form is intended to be emailed to a government Finance section — that is the purpose of the app, and the crew chooses the recipient.

Where the data lives, and for how long

All data is stored in the United States. We keep it for as long as the company's account is active. There is no automatic expiry: a filed invoice from a previous fire season stays available, because a contractor may need to produce it long after the fire is out.

When deletion is requested, we act on it — see Delete your account for exactly what is removed and what is kept.

How it is protected

No system is perfectly secure, and we will not claim otherwise. If we ever discover a breach affecting your information, we will tell affected companies without undue delay.

Your choices

You can, at any time:

Depending on where you live, you may have additional rights — for example under the California Consumer Privacy Act — including the right to know what we hold, to have it deleted, and not to be treated differently for exercising those rights. We honour these requests regardless of where you live. We will never charge you or degrade the service for making one.

Children

HETF is a tool for working contractors. It is not directed to children, and we do not knowingly collect information from anyone under 13. If you believe a child's information has reached us, write to kimoy@1dash.io and we will remove it.

Changes to this policy

If we change what the app collects or who it is shared with, we will update this page and move the "last updated" date above. Material changes will also be announced in the app. We will not make a change retroactively reduce your rights over information already collected.

Contact

1 DASH LLC — kimoy@1dash.io. We aim to answer any privacy question within 30 days, and usually much sooner.